Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2738/Uy_YUDq8kVq0ZkMP1rfJ3UL4Mu8.roa
File:                     Uy_YUDq8kVq0ZkMP1rfJ3UL4Mu8.roa (raw, json)
Hash identifier:          jqaKq73hGu/evAN2WEBEpdJ0dXpfo10ilzMhASbtn3A=
Subject key identifier:   53:2F:D8:50:3A:BC:91:5A:B4:66:43:0F:D6:B7:C9:DD:42:F8:32:EF
Certificate issuer:       /CN=F83D3035C08F8009CF3AD561D45AC6A0824BAAE8
Certificate serial:       04
Authority key identifier: F8:3D:30:35:C0:8F:80:09:CF:3A:D5:61:D4:5A:C6:A0:82:4B:AA:E8
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-D0wNcCPgAnPOtVh1FrGoIJLqug.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/Uy_YUDq8kVq0ZkMP1rfJ3UL4Mu8.roa
Signing time:             Thu 27 May 2021 05:05:19 +0000
ROA not before:           Thu 27 May 2021 05:05:19 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     137798
IP address blocks:        2402:f8c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F83D3035C08F8009CF3AD561D45AC6A0824BAAE8
        Validity
            Not Before: May 27 05:05:19 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=532FD8503ABC915AB466430FD6B7C9DD42F832EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c0:1b:7e:b7:57:be:2d:81:e3:46:1e:59:5a:
                    28:9d:02:09:33:29:be:c6:27:14:86:ba:f7:6e:dd:
                    ef:2e:e2:c7:99:b5:e4:d7:64:63:dd:cc:3b:81:71:
                    a8:df:f8:62:cc:b4:6f:93:f0:ae:1c:c3:bc:db:93:
                    e1:b9:6b:a0:5c:0a:5f:02:7c:5e:d0:a0:d4:7a:c6:
                    b8:c6:11:da:26:c0:00:d9:c7:8b:60:12:9c:b7:78:
                    b1:53:ce:9d:e2:be:00:33:38:f7:ca:5c:40:ea:3b:
                    f2:84:19:43:46:5c:71:7d:ba:c8:53:b9:27:a8:7b:
                    ee:27:59:e5:62:01:5d:65:75:27:0d:65:13:3b:6d:
                    44:c9:b4:b3:a4:92:19:aa:49:9b:d4:ed:62:42:ae:
                    4d:68:25:a5:06:64:a1:36:b2:ea:36:69:f2:34:dc:
                    43:78:97:1d:d3:44:0b:d6:6c:86:18:15:9d:37:a6:
                    ed:9f:d2:be:ac:86:1d:17:d7:43:2b:51:a9:31:98:
                    58:34:2c:8a:b1:74:39:49:01:d2:1b:d8:9e:6d:82:
                    c7:44:b5:b4:6e:2f:55:02:8f:e8:9d:e0:9a:f2:55:
                    f9:4c:64:34:27:57:7b:a3:e4:ca:7f:c8:0e:e3:40:
                    01:e5:7b:6e:01:53:cc:d0:4f:98:c4:46:18:ab:e1:
                    a9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2F:D8:50:3A:BC:91:5A:B4:66:43:0F:D6:B7:C9:DD:42:F8:32:EF
            X509v3 Authority Key Identifier:
                keyid:F8:3D:30:35:C0:8F:80:09:CF:3A:D5:61:D4:5A:C6:A0:82:4B:AA:E8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/-D0wNcCPgAnPOtVh1FrGoIJLqug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-D0wNcCPgAnPOtVh1FrGoIJLqug.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/Uy_YUDq8kVq0ZkMP1rfJ3UL4Mu8.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:f8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:c0:8e:9a:e4:fd:41:f6:e0:84:2a:9e:a3:56:7c:37:b4:5a:
         62:65:ad:b8:ef:e5:ed:a2:e4:dd:31:ec:4c:d8:9b:f8:8c:1c:
         73:a1:68:1e:30:dd:57:57:eb:12:f7:c0:09:1f:e6:bf:aa:ae:
         af:1d:13:72:b8:64:3a:fe:aa:76:ed:2c:67:f8:a2:3f:80:ca:
         36:0d:69:42:d5:b6:00:90:81:a0:a6:4f:8d:e5:c7:f4:97:9e:
         d3:4f:65:bd:af:84:2f:18:d8:4b:99:08:0a:38:80:80:fd:2f:
         9f:3c:9a:46:1f:45:77:07:a7:57:33:a8:75:fb:2f:25:e1:ad:
         a6:b3:5a:e1:7b:30:e5:a9:30:6f:b4:f6:4e:6e:34:db:57:79:
         ae:e6:94:bc:4b:b4:77:9f:86:2e:0c:a6:d2:e3:bc:5c:e0:11:
         38:c1:80:49:37:7c:6c:3a:b7:f1:58:9f:7d:97:c2:3e:61:47:
         4c:8f:f6:05:c8:37:a2:fe:e7:c6:55:6d:85:81:09:a8:28:83:
         24:31:57:4e:6e:d4:12:39:f6:a3:25:9c:5f:bd:4f:a5:68:7c:
         b0:1e:2b:5d:fb:b2:cf:e5:d8:98:32:e8:78:f8:f4:1e:70:54:
         97:bc:3b:ec:1e:4f:b6:01:6d:a2:6b:47:5b:05:04:95:29:cb:
         df:64:5c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----